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In this paper we illuminate the relation between entanglement and secrecy by providing the first 
example of a quantum state that is highly entangled, but from which, nevertheless, almost no 
secrecy can be extracted. More precisely, we provide two bounds on the bipartite entanglement of 
the totally antisymmetric state in dimension d x d. First, we show that the amount of secrecy that 
can be extracted from the state is low, to be precise it is bounded by 0(l/d). Second, we show that 
the state is highly entangled in the sense that we need a large amount of singlets to create the state: 
entanglement cost is larger than a constant, independent of d. In order to obtain our results we 
use representation theory, linear programming and the entanglement measure known as squashed 
entanglement. Our findings also clarify the relation between the squashed entanglement and the 
relative entropy of entanglement. 



Entanglement is a quantum phenomenon governing the 
correlations between two parties. It is both responsible 
for Einstein's "spooky action at a distance" as well as 
the security of quantum key distribution [TJ [5] . The uni- 
versal resource for entanglement is the ebit, i.e. the state 
1^) := ^(|00) + 111)) [g. Ebits are needed for tele- 
portation, superdense coding and directly lead to secret 
bits. It is therefore natm'al to associate the usefulness 
of a quantum state with the distillable entanglement, the 
amount of ebits that can be extracted from it asymptot- 
ically by local operations and classical communication 
(LOCC). The amount of ebits needed to create the state 
has been called entanglement cost 0], for which there is 
the formula [5] 



Ec{p) = lim -Epip 



(1) 



with the entanglement of formation Ep{p) [3]. 

An important result relating to these quantities has 
been the discovery of bound entanglement, that is of 
states that need ebits for their creation but from which no 
ebits can be extracted: Ec{p) > and E£i{p) = [6 . A 
recent surprise has been the realization that there exist 
bound entangled states from which secrecy can be ex- 
tracted 0, a result that overthrew previous beliefs that 
secrecy extraction and entanglement distillation would 
go hand in hand. The amount of key that can be ex- 
tracted from a quantum state is known as the distillable 
key Ko{p), and a fundamental question at this point 
is the following. Are there states requiring key to cre- 
ate them but from which no secret key can be distilled? 
Even the weaker form, whether there exist states with 
Ec{p) > but Kd{p) — 0, seems too difficult at the 
moment. Here we show that in an asymptotic sense the 
answer is yes. In the spirit of [S], we show that there 
exists a family of states with constant lower bound on 
their entanglement cost, but arbitrarily small distillable 
key. 



Our example is the well-known antisymmetric state ad 
in C^^C^, that is the state proportional to the projector 
onto the antisymmetric subspace. Our main results are: 



Ec{ad) > log2 and 



if d is even 
if d is odd 



O 



(2) 
(3) 



Being an extreme point of the set of Werner states, 
some entanglement measures have been computed for ad 
previously [H [TU], although entanglement cost has de- 
fied its calculation. The only exception was Yura's tour 
de force calculation in which he proved that Ecia^) — 
1 [IT] . Perhaps researchers had also lost interested in the 
problem since the additivity conjecture of entanglement 
of formation [T^] would have implied that Ec{ad) = 1, 
as it is easy to see that for all d, Ep{ad) — 1- Now this 
conjecture is known to be false [13], and we thus believe 
that our result also sheds light on the old problem of cal- 
culating the entanglement cost and the cases in which 
at least some weak form of additivity might hold. We 
emphasize that the value of logj | is only a lower bound, 
and that it is quite conceivable that Ec{ad) — 1. 

For each of the two bounds, we introduce a new tech- 
nique that may be of interest in its own right. We 
start by deriving the upper bound on the distillable key. 
The argument consists of two steps. First we show that 
squashed entanglement is an upper bound on the distill- 
able key. Then we provide an upper bound on squashed 
entanglement for the antisymmetric states. To lower 
bound the entanglement cost, we relax the calculation 
of Ep{af'^) first to a semidefinite programme, and then 
reduce this with the help of representation theory - for 
the first time using the concept of plethysm in quantum 
information theory - to a linear programme. Finally, we 
find a feasible point of the dual programme, resulting in 



2 



our lower bound. Along the way, we recover Yura's result 
due to a representation-theoretic simplification in d = 3. 

Upper bound on distillable key. The formal defini- 
tion of the distillable key is 

— : ||A„(p®") -7„Ji <e\, 
n J 

where the maximisation extends over LOCC protocols A„ 
and states -frn that contain m bits of pure secrecy. More 
precisely, 7™ = UaAA' b b' for some controUed-unitary 
U = Ya=i ® Ui and gaa'BB' = |*)($Ub ® cta'B', 

where |$) = "Tp? Si=i I*) I*) is the maximally entan- 



case, I{A;B\E)a, = H{AE)„ + H{BE)a, 



gled state of rank 2^' 
glement [T3] 



[^. Recall the squashed entan- 



EsqifAB) 



inf -I{A;B\E)„ 

PABE-PAB = irE PABE Z 



where/(A;B|£:) = H{AE) + H{BE)- H{ABE) - H{E) 
is the quantum conditional mutual information with H{-) 
the von Neumann entropy. The following result was first 
announced in [15]. 

Lemma 1 For all pab, Kd{pab) < E^qipAB)- 

Proof Let A„ be an LOCC protocol such that 
||A„(p®") — 7m||i < e. Since squashed entanglement is a 
monotone under LOCC [T3] and asymptotically continu- 
ous E,qip'»") > E,q{A{p'»")) > £;sq(7m) - S{e)n, 
where 6{e) approaches zero as e decreases [23]. Re- 
call the form of the state 7 — jm: In order to show 
that Esq{%n) > ™, consider an extension aAA'BB'E 
of ctaa'bb' and the induced extension ^aa'bb'e ~ 
{U (g) tE)(^AA'BB'E{U^ <S) 1e) of jAA'BB'- Clearly, 
H(AA'BB'E)^ = H{AA'BB'E)a = H{A'B'E)^ ^ 

H {A' B'E)^^, with a A' B'E.t := {UimE)crA'B'E{U}mE)- 
Furthermore, H{E)^^ = H{E)„ and H{AA'E)^ = 
H(A)^ + T,iPiHiA'E)„^ and similarly for H{BB'E)^. 
Altogether this gives I{AA' ; BB'\E)^ > H{A)^ + 
H{B)^ + Y.^pJ{A']B'\E)„^ > 2m, where we used the 
non-negativity of the quantum mutual information. This 
shows that i?sq(7m) > ™ and therefore Esq{p) > ——(5(e). 
Choosing a sequence of protocols A„ that achieves the 
distillable key, the r.h.s. converges to Ko{p). □ 

In order to find an upper bound on distillable key, it 
thus suffices to upper bound squashed entanglement: 



Esq{ad) < 



d+2 



log; 
2 iOg2 d_i 



d even 
d odd. 



(4) 



Let Pfe be the projector onto a'^(C'*), the antisymmet- 
ric subspace of k systems with local dimension d. Note 
that 4 := dimA'=(C'') Q and a<j = ^. We 
make use of the fact that uabe '■— ^ is an exten- 
sion of aAB if E consists of fc — 2 particles. In that 



k d-k+2 



- H{E)^ - 
The values 



H{ABE)^ = log2 = log2 k-i d-k+i 

in Q are then obtained by minimising over fc; the min- 
ima are reached for | -f 1 and for even and odd d, 
respectively. 

This is remarkable as the regularised relative entropy 
of entanglement with respect to PPT states, the Rains 
bound, and the logarithmic negativity are all equal to 
log2 for ad [HI Hn] ■ In the light of these results we 
are tempted to conjecture that Esq{ad) = log2 at 
least for even d. With the upper bound on squashed 
entanglement we not only match the best known up- 
per bounds on distillable entanglement, but obtain the 
new bound, (|3|, on the distillable key, since by Lemma [l] 
Koio-d) < Esq{ad). 



Our bound gives Esq{ad) < 



210K 



d-i ~ ^(5) which im- 
proves over the bound Esq{ad) = 0{^^^-^), obtained us- 
ing the monogamy of squashed entanglement [T7]. On 
the other hand, both Ed and Kn are > Up to a con- 
stant, the bound that we have obtained for squashed en- 
tanglement, distillable key (and distillable entanglement, 
but this we knew before) is therefore optimal. Previously 
the best upper bound for distillable key was ^, from a 
computation of the relative entropy of entanglement with 
respect to separable states of two copies of Ud [2l UHl [19] . 

Lower bound on the entanglement cost. The cal- 
culation of the entanglement cost using the formula ([T]) 
seems very daunting in general due to the infinite limit; 
but in fact, even the computation of entanglement of for- 
mation is a very difficult task in general. However, for 
ad the g 1^ g symmetry (for unitary g) comes to help. 



Lemma 2 £:f(q;?") > - log, max Tvi/jI„, 

where ipA" = Trsn \ip){'ip\A^B" ■ We use Young diagrams 
to denote the subspaces of the irreducible representations 
ofU{d): — A^(C'') with associated projector Pg. 

Proof By definition, Epia®'') 

min{p.,|V',>}:"r=i:.pd'A.>(V',|Si^*-^('^'4,»). Note that 
all states appearing in the ensembles are contained in 
B^". Thus Epip'^'') > min|^)^„^„gg»„ ff(i^A") (in fact 
this is an equality: just take any minimizer and twirl 
it). The proof follows by noting that the von Neumann 
entropy is lower bounded by the quantum Renyi entropy 
of order two, H2{(t) = — log2 Tr cr^. □ 

Yura [11 proved that the r.h.s. equals n if d = 3. To- 
gether with the observation that the ^^(^(ad) < Ep{ad) = 
1, he has thus calculated entanglement cost of a^. In the 
following we will show that the r.h.s. is lower bounded 
by n times log2 | > 0.415 for all d, and how to recover 
Yura's result for d = 3. 
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separable 




FIG. 1: Illustration of the properties of the state 
^Ia"B"A'"B'" ■ Systems connected by a curly line are in the 
state Od- Each group AiBiA[B[ is (7^^-invariant. 



Lemma 3 max Tr-0^„ = niaxTril^i.^'>iFA»i-^'Ti, 
where the second maximisation is over all states 



E 



that are separable across the the A"^B^^ : cut and 

invariant under permutation of the systems AiBiA[B[. 
The states Py. on AiBiA[B[ are proportional to the pro- 
jectors onto the spaces in ^ below (see Fig. [7p. 

Proof Note that Tr^i^ = "^t:{'iPa^ ® ■0A'")^A":A'", 
where Fc.d is the operator that permutes ("flips") sys- 
tems C and D. Since A" = Ai - ■ ■ A^ and likewise for 
A'", we have Fa^-.a'^ = Ff!\, and therefore 



A:A' 



^B'^B 



Because Fa-A' commutes with g®'^ for all g G U{d), 
we can replace -tpA^B" €5 ipA'^B'" by the twirled state 
ilA"B"A"-B'" = TfsA'B'i'^A^'B" ® ipA'^B'") where 
Taba'B' is defined by Tasa'B'W = J dg g^^Xig^)^^ 
with the normalised Haar measure dg on U{d). Com- 
puting the plethysms Sym^(g) and A^(B) we find (see 
App. B [20]) 



B«2^Sym2(B)©A2(B)= (I® ffl) 



(6) 



By elementary representation theory we can extend this 
result to the n-fold products and obtain ([5| . Note further 
that ilA^^B^A'^B'" is separable across A^B" : A'^B'^ and 
can be taken to be permutation- invariant. □ 

The requirement of separability is difficult to handle, 
so we will relax it to the state having positive partial 
transpose (PPT). At this point we are dealing with a 
semidefinite programme, but using representation theory 
we can express the PPT condition as a linear constraint 
and the target function as a linear function in the vari- 
ables py^ {p := (py'Oy")- 



Lemma 4 



max 



where 



Cn,d ■■= max s.t. p> 0, 1, Tj«"p > 0. (7) 



Here, t — (—1, ^,0), and the matrix Td is given by 



I 



V 



-2 - 

I 2(d^-d+l) 



-1 

2 

d-2 
2d-3 



d(rf-l)(d-2) ^ d{d-l) ^ d(d-l)(d-2) / 



Proof The objective function takes the form 

n 



TrnA^^A'«FA'-■.A'" = 



i=l 



where we define py — T^vbb' Py, and the coefficients ty = 
Tr PyFA-.A' are the result of a straightforward but lengthy 
calculation (see App. A [2^). We then compute the par- 
tial transposes of py with respect to AB : A'B'. Since 
these Py commute with all g®g®g®g, it is natural to first 
find the decomposition of the space A^(C'^) ® A^(C'') un- 
der this action into irreducible components. It turns out 
that the space has three multiplicity-free components, 
which can be given as the supports of positive operators 
(see App. B I20j). The rows of Td contain the compo- 
nents of p^ in terms of these operators. Vl is PPT is then 
equivalent to r|'V> 0. □ 
The case d = 3 is special because | does not appear in 
g(g)2_ rpj_^g linear programme can be solved easily and we 
recover Yura's result that for all n, Epiaf^) = n, and 
hence Ecia^) — 1. For d > 4, H is present and things are 
more complicated. Because of the LOCC monotonicity 
of Ep under twirling, Ep{a'^"') is non-increasing with d, 
so we aim to understand this linear programme for fixed 
n but asymptotically large d. In the limit c? — ^ oo. 



Td 



T^ 




Corollary 5 With T = 
Cn,d<C« :=maxi®"-p = 2 



2 1 

^ ^ ] and r= (-1, i), 



a"6{§,ffl}" 



-2)l^"l 



(8) 



s.t. p > 0, 1 ■ p < 1, —T®^^p < 0, and pyn only depends 
on the number |y"| of occurrences of |. 

Proof Consider the linear programme ([7]) for d ^ oo 
and write the constraints in the form {wi-^ ® ■ ■ ■®'Wi^ ) -p > 
0, where wj denotes the j'th row of Too- We will now drop 
all constraints which contain the first row of Too, i-e. we 
delete this row from Too. Then we see that no ?/" ever 
need to occur that contains one or more ^'s. Namely, in 
the expansion of the state 57 every single occurrence of 
prp may be replaced with |pn + fpg, turning a feasible 
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point into a new feasible point, and not changing the 
value of the objective function. 

It follows that we can delete the last column of Too , as 
its entries never appear again in the constraints. □ 

Now all that is left is to find an upper bound on 

Lemma 6 Cn < (|)", hence Epiaf) > nlog^ |. 

Proof The dual linear programme to ([s]) is given by 

minz s.t. q > 0, zl- > i®", (9) 

where S — . Its value equals C„ by linear program- 
ming duality. A short calculation shows that the con- 
straints are equivalent to the set of inequalities 



>(-2r2-" + ^4E(-2) 



k=0 I 



m\ n — m 



£ j\k-e 



(10) 



for m = 0, . . . , n. It is easily checked that z — (3/4)", 
together with Sk = 2*^"^" for k < n, and (5„ = 0, is dual 
feasible, thus providing an upper bound on the primal. 

This is the last step in the argument proving the lower 
bound on entanglement cost, □ 

Conclusion. We have proven a constant lower bound on 
the entanglement cost of the dxd antisymmetric state by 
way of calculating its Renyi-2 entropic version as a convex 
optimisation problem, and using a linear programming 
relaxation. Tighter relaxations are possible, in principle 
capable of obtaining the exact value of the maximum pu- 
rity of the reduced state over all {ip) e B*^"!!!]. At the 
same time, we showed that the squashed entanglement 
of these states, and thus the distillable key, is arbitrarily 
small. We believe that our result is the strongest indi- 
cation to date that "quantum bound key" exists: states 
with positive key cost to create them (a notion not yet 
defined in the literature, and a little tricky to formalize 
cleanly), but with zero distillable key. 

In comparison to the large gap observed between the 
entanglement of formation and distillable key |21j . our 
work exhibits three advantages. Firstly, our example is 
constructive, secondly, we show that the distillable key 
can be made arbitrarily small and thirdly, we consider the 
entanglement cost, which is the right measure to compare 
with the distillable key, and which can be strictly smaller 
than the entanglement of formation [13^ . The distinction 
between entanglement cost and entanglement of forma- 
tion is crucial here, as it was for the discovery of bound 
entanglement [52] , since the asymptotic measure of distil- 
lable key has to be compared to an asymptotic measure 
of preparing the state. 

Finally, we can also lower bound the regularised 
relative entropy of entanglement of w.r.t. separa- 
ble states [Hj: E^^^^^iaa) = lim„^oo ^Sfl.scp(«^)■ 
Namely, by the same argument as in [T^, i?i^,scp(af ") = 



— log2 maxTrcrPg where the maximum is over states 
a separable across the cut A" : B". However, 

max TraP^"= max (a|(/3|P^"|«) I/?) 

,T separable b q) £ A" . h3) £ B" □ 

across : £J " 

I I 2 II II 

= max (q;|(/3|'!/') — max Tr^n Ii/jV?/;! 

and the last line is evidently upper bounded by the square 
root of the maximum purity, which we showed above to 

be < (3/4)". Hence, E^^^^^ia^) > log^ ^ > 0.207. 
In contrast, the calculation of [TO] shows E^ppj,{ad) = 
log2 for the relative entropy measure w.r.t. PPT 
states. We conclude that squashed entanglement can be 
much smaller than the separable relative entropy mea- 
sure; the opposite separation was known before thanks 
to the "flower states" of j23j . 
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